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IN THE CLAIMS: 



1. 



(Currently amended) A method of servi cing secure transactions in a network, 



comprising: 

establishing cryptographic parameters in a handshake engine; 

servicing a transaction in a transaction server using unencrypted data; 

utilizing an inline crypto engine and the cryptographic parameters 
establi shed bv the handshake engine to perform at least one of encryption 
associated with transmitted data and decryption associated with transmitted data* 
the inline crypto engine having capability for performi ng at least one of 
encryption and decryption of data . 

2. (Original) The method of claim 1 ? wherein the inline crypto engine performs 
decryption on the transmitted data to obtain the unencrypted data. 

3. (Original) The method of claim 1 , wherein the inline crypto engine performs 
encryption on the unencrypted data to obtain the transmitted data, 

4. (Currently amended) The method of claim 1 ? wherein the establishing step 
includes handing off a network connection from the transaction server to the handshake 
engine such that the handshake engine can establish the cryptographic parameters with a 
client counled to the network. 

5. (Original) The method of claim 1 > wherein the servicing step includes handing off 
a network connection from the handshake engine to the transaction server. 

6. (Original) The method of claim 1, wherein the establishing step includes 
performing a Secure Sockets Layer (SSL) handshake procedure. 

7. (Original) The method of ctaira 1, wherein the establishing step includes 
performing a Transport Layer Security handshake procedure. * p\b r 
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8. (Original) The method of claim 1 , wherein the transaction is returning at least one 
of a data file and streaming data. 

9. (Original) The method of claim 8, wherein the streaming data includes at least one 
of audio data and video data* 

1 0. (Original) The method of claim 8, wherein the data file includes at least one of a 
hypertext page and a structured data file. 

1 1 . (Currently ametided) The method of claim * 1, wherein the transaction is 
submitting information taken from a form. 

12. (Original) The method of claim 1, wherein the cryptographic parameters include 
at least one cryptographic key. 

1 3. (Original) The method of claim 12, wherein the at least one cryptographic key 
includes at least one of a public key and a private key. 

14. (Original) The method of claim 1 , further comprising: 

notifying the inline crypto engine of the cryptographic parameters. 

15. (Original) The method of claim 12, further comprising: 

receiving a request to establish the cryptographic parameters; and 
responsive to receiving the request, performing the establishing step. 

16. (Currently amended) The method of claim 1 ? further comprising: 

receiving the transmitted data from the network by the inline crypto 

engine . 
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1 7. (Currently amended) The method of claim 1 , further comprising: 

transmitting the transmitted data to the network bv the inline crypto 

engine . 

1 8. (On ginal) The method of claim 1 , wherein die unencrypted data is a request to 
perform the transaction. 

19. (Currently amended) A computer program product in at least one computer 
readable medium for servicing secure transactions ih a network, comprising instructions 
for: 

establishing cryptographic pararoetets in a handshake engine; 

servicing a transaction in a transaction server using unencrypted data; 

utilizing an inline crypto engine and the cryptographic parameters 
established bv the handshake engine to perform at least one of encryption 
associated with transmitted data and decryption associated with transmitted data fl 
the inline crypto engine having capability foir performing at least one of 
encryption and decryption of data , * 

20. (Original) The computer program product of claim 19, wherein the inline crypto 
engine performs decryption on the transmitted data to obtain the unencrypted data. 

2 1 . (Original) The computer program product of claim 1 9, wherein the inline crypto 
engine performs encryption on the unencrypted data to obtain the transmitted data. 

22. (Currently amended) The computer program product of claim 19, wherein the 
instructions for establishing include instructions for: handing off a network connection 
from the transaction server to the handshake engines such that the handshake engine can 
establish the cryptographic parameters with a client! coupled to the network . 
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23. (Original) The computer program product of claim 19; wherein the instructions 
for servicing include instructions for handing off a network connection from the 
handshake engine to the transaction server. 

24. (Original) The computer program product of claim 1 9, wherein the instructions 
for establishing include instructions for performing a Secure Sockets Layer (SSL) 
handshake procedure. 

25. (Original) The computer program product of claim J 9, wherein the instructions 
for establishing include instructions for performing a Transport Layer Security handshake 
procedure. 

26. (Ori ginal) The computer program product of claim 19, wherein the transaction is 
returning at least one of a data file and streaming data. 

27. (Original) The computer program product of claim 26, wherein the streaming data 
includes at least one of audio data and video data. 

28. (Original) The computer program product of claim 26, wherein the data file 
includes at least one of a hypertext page and a structured data file. 

29. (Original) The computer program product of claim 26, wherein the transaction is 
submitting information taken from a form. 

30. (Original) The computer program product of claim 19, wherein the cryptographic 
parameters include at least one cryptographic key. 

3 1 . (Original) The computer program product of claim 30, wherein the at least one 
cryptographic key includes at least one of a public key and a private key. 
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32. (Original) The computer program product of claim 19, further comprising 
instructions for: 

notifying the inline crypto engine of the cryptographic parameters. 

33 . (Original) The computer program product of claim 30, further comprising 
instructions for: 

receiving a request to establish the cryptographic parameters; and 
responsive to receiving the request, performing the establishing step, 

34. (Currently amended) The computer program product of claim 19, further 
comprising instructions for: 

receiving the transmitted data from the network bv the inline crypto 

engine , 

35. (Currently amended) The computer program product of claim 19, further 
comprising instructions for: 

transmitting the transmitted data to the network by the inline crypto 

engine . 

36. (Original) The computer program product of clai m 19, wherein the unencrypted 
data is a request to perform the transaction. 

37. (Original) The computer program product of claim 19, wherein the unencrypted 
data is a hypertext page. 

38. (Currently amended) A distributed data processing system for servicing secure 
transactions in a network* comprising: 

at least one inline crypto engine in communication with the network, 
wherein the at least one inline crypto engine includes at least one processor for 
performing at least one of encryption and decryption of data ; 
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at least one transaction server in communication with the at least one 
inline crypto engine, wherein the at least one transaction server includes at least 
one processor, and 

at least one handshake engine in communication with the at least one 
transaction server and the at least one inline crypto engine, wherein the at least 
one handshake engine includes at least one processor, 

wherein the at least one handshake engine establishes cryptographic 
parameters, 

the transaction server services a transaction using unencrypted data, and 
the at least one inline crypto engine utilizes the cryptographic parameters 
established bv the handshake engine to perform at least one of encryption 
associated with the transmitted data and decryption associated with transmitted 
data. 



39. (Original) The distributed data processing system of claim 38, wherein the at least 
one inline crypto engine performs decryption on the transmitted data to obtain the 
unencrypted data, 

40. (Original) The distributed data processing system of claim 38, wherein the at least 
one inline crypto engine performs encryption on the unencrypted data to obtain the 
transmitted data. 



41. (Currently amended) The distributed data processing system of claim 38, wherein 
establishing the cryptographic parameters includes handing off a network connection 
from the at least one transaction server to the at least one handshake engine such that the 
handshake engine can establish the cryptographic parameters with a client coupled to the 
network * 
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42. (Original) The distributed data processing system of claim 38, wherein servicing 
the transaction includes handing off a network connection from the at least one 
handshake engine to the at least one transaction server. 

43. (Original) The distributed data processing system of claim 38, wherein 
establishing the cryptographic parameters includes performing a Secure Sockets Layer 
(SSL) handshake procedure. 

44. (Original) The distributed data processing system of claim 38, wherein 
establishing the cryptographic parameters includes performing a Transport Layer 
Security handshake procedure, 

45. (Original) The distributed data processing system of claim 38, wherein the 
transaction is returning at least one of a data file and streaming data. 

46. (Currently amended) The distributed data processing system of claim 3$ 45, 
wherein the streaming data includes at least one of audio data and video data. 

47. (Currently amended) The distributed data processing system of claim 45 7 
wherein the data file includes at least one of a hypertext page and a structured data file. 

48. (Currently amended) Tho method of claim 3, wh e r e in th e tronoaotion is oubmitting 
information taken from a form A method for using the distributed data processing system 
of claim 38. comprising steps of: 

receiving, from a client coupled to the network, a request by one inline crypto 
engine of the at least one inline crypto engine: 

determining whether the received request is encrypted; 

if the receive d request is encrypted, decrypting the received request bv the one 
inline crypto engine and passing the decrypted received request to one transaction server 
of the at least one transaction server: 
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if the received request is not encrypted, passing the received requ est to the one 
transaction server: 

determining whether a handshake procedure must be performed, and if so, 
handing off anetwork connection from the one transaction server to one handshake 
engine of the at least one handshake engine such that the one handshake engine can 
establish the cryptographic parameters with the client . 

49. (Original) The distributed data processing system of claim 38, wherein the 
cryptographic parameters include at least one cryptographic key. 

50. (Original) The distributed data processing system of claim 49, wherein the at least 
one cryptographic key includes at least one of a public key and a private key. 

51 . (Original) The distributed data processing system of claim 38, wherein the at least 
one handshake engine notifies the inline crypto engine of the cryptographic parameters. 

52. (Original) The distributed data processing system of claim 49, wherein the at least 
one transaction server receives a request to establish the cryptographic parameters; and 
responsive to the at least one transaction server's receiving the request, the at least one 
handshake engine performs the establishing step. 

53. (Original) The di stributed data processing system of claim 38, wherein the 
unencrypted data is a request to perform the transaction. 

54. (Currently amended) The distributed data processing system of claim 38, wherein 
tho unencrypt e d data i s-ar hyportoxt pago further comprising a network dispatcher coupled 
between the at least one inline crypto engine and the at least one transaction server . 

55. (Original) The distributed data processing system of claim 38, wherein the at least 
one transaction server, the at least one inline handshake engine, and the at least one inline 
crypto engine operate concurrently. 
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56. (Original) The distributed data processing system of claim 38, wherein the at least 
one transaction server, the at least one inline handshake engine, and the at least one inline 
crypto engine operate asynchronously. 
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